Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 95.85.251.19
95.85.251.19 - - [16/May/2026:23:53:34 +0000] "GET /info.php HTTP/1.1" 404 2762 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
Count: 13 events
show less
Fail2Ban (recidive): Ban 95.85.251.19 for 1 week
Repeat offender: banned 6 times across jails: postf ...
show moreFail2Ban (recidive): Ban 95.85.251.19 for 1 week
Repeat offender: banned 6 times across jails: postfix-sasl, nginx-http-auth, traefik-auth, nginx-botsearch
Last ban: postfix-sasl jail at 16/May/2026:05:10:07 +0000
Total failed attempts: 23
show less